Talk:MaemoSecurity - Revision history

imported_>amigadave: redirect to Talk:Maemo security

2010-02-11T15:28:51Z

← Older revision		Revision as of 15:28, 11 February 2010
Line 1:		Line 1:
	~~== This is now at~~ [[Talk:Maemo security]] ==		#REDIRECT [[Talk:Maemo security]]

	~~=== protected mode hacking ===~~
	If signed kernel will had vulnerability, can it (legally) used by user for escalating his own rights on his own cellphone in protected mode? Will nokia charge such user (or user, publishing a way to hack official kernel) with legal pursuit? #![[Special:Contributions/80.249.182.252\|80.249.182.252]] 15:23, 11 February 2010 (UTC)

80.249.182.252: /* This is now at Talk:Maemo security */

2010-02-11T15:23:17Z

This is now at Talk:Maemo security

← Older revision		Revision as of 15:23, 11 February 2010
Line 1:		Line 1:
	== This is now at [[Talk:Maemo security]] ==		== This is now at [[Talk:Maemo security]] ==

			=== protected mode hacking ===
			If signed kernel will had vulnerability, can it (legally) used by user for escalating his own rights on his own cellphone in protected mode? Will nokia charge such user (or user, publishing a way to hack official kernel) with legal pursuit? #![[Special:Contributions/80.249.182.252\|80.249.182.252]] 15:23, 11 February 2010 (UTC)

imported_>jaffa: PAGE HAS MOVED!

2009-10-13T12:01:28Z

PAGE HAS MOVED!

← Older revision		Revision as of 12:01, 13 October 2009
Line 1:		Line 1:
	~~Suggested questions:~~		== This is now at [[Talk:Maemo security]] ==

	~~===Is there a diagram showing the security framework and components?===~~
	~~There were some diagrams in the presentation - can we see them.~~

	~~===What is "Open Mode" and can it be revoked remotely?===~~
	~~Is that the right terminology?~~
	~~Essentially can Nokia reach out the the 2nd stage bootloader and tell it to stop running unsigned kernels.~~
	~~Maybe this should be 2 questions.~~

	~~===What does closed mode restrict you from doing? Terminal? Root?===~~

	~~===How easy is it to switch between Open and Closed modes?===~~

	~~Is it so trivial that you would want to and be able to do it several times a day and on the go (without restart)?~~

	~~===Can network operators restrict you switching to Open mode?===~~
	~~Like if a device is sim-locked to a particular network, does the device get locked down in closed DRM mode only too? Can you always switch to open mode?~~

	===~~How granular~~ is ~~the encryption?===~~
	~~If my app creates content in the closed mode can I see it in open mode?~~

	~~===Can open applications use the privilege mechanisms in the Open and Closed modes?===~~

	~~===Can open applications use the DRM encryption mechanisms in the Open and Closed modes?===~~
	~~I can see that this could be useful. Maybe.~~

	~~===Will community extensions to the kernel (modules) be permitted in Open/Closed modes?===~~
	~~I can't see how - which leads to the question: How do community 'enhancements' to the kernel get adopted?~~

	~~===Is there any GPLv3 software impacted?===~~
	~~Please have a license discussion somewhere and let us know when you have consensus.~~
	~~What is Nokias position? Peter made a statement~~ at ~~the talk - can someone transcribe it and/or get Nokia to clarify.~~

	~~===What exactly is available to the end user?===~~

	* storage encryption ?
	* PIM data encryption ?
	* encrypted/signed communications (phone, sms/mms, mails, IM) ?

	~~=== How does closed mode affect on-device debugging? ===~~

	~~For example, will ptrace(2) still work (eg gdb, strace & ltrace)? Will we be able to produce code dumps?~~

	~~===Will DRM-free data and DRM-free applications be accessible from both modes once they're installed/created in either of the two modes?===~~

	~~E.g.~~: I start in DRM-mode, install DRM-free applications from Extras, take 3 pictures, add some contacts. Then I switch to DRM-free mode: Will I be able to run the applications installed in DRM-free mode, view and edit my contacts and view and edit my own pictures? (And the other way round, of course, starting from DRM-free mode and switching to DRM afterwards.)

	~~===What is open mode good for at all?===~~

	Provided you don't consume digitally restricted media and don't purchase applications that in any way rely on DRM: You don't need DRM-mode then, but on the other hand why would you want DRM-free mode? What is it you cannot do in DRM-mode in such a scenario? Use case?

	~~===What is ARM's TrustZone?===~~

	~~===Can the Trusted Execution Environment (TrEE) be used as a kill switch for the device even if it runs in open mode?=~~==

imported_>corsac: /* How easy is it to switch between Open and Closed modes? */

2009-10-13T06:26:42Z

How easy is it to switch between Open and Closed modes?

← Older revision		Revision as of 06:26, 13 October 2009
Line 13:		Line 13:
	===How easy is it to switch between Open and Closed modes?===		===How easy is it to switch between Open and Closed modes?===

	Is it so trivial that you would want to and be able to do it several times a day and on the go?		Is it so trivial that you would want to and be able to do it several times a day and on the go (without restart)?

	===Can network operators restrict you switching to Open mode?===		===Can network operators restrict you switching to Open mode?===

imported_>mhasselm at 16:37, 12 October 2009

2009-10-12T16:37:30Z

← Older revision		Revision as of 16:37, 12 October 2009
Line 50:		Line 50:

	Provided you don't consume digitally restricted media and don't purchase applications that in any way rely on DRM: You don't need DRM-mode then, but on the other hand why would you want DRM-free mode? What is it you cannot do in DRM-mode in such a scenario? Use case?		Provided you don't consume digitally restricted media and don't purchase applications that in any way rely on DRM: You don't need DRM-mode then, but on the other hand why would you want DRM-free mode? What is it you cannot do in DRM-mode in such a scenario? Use case?

			===What is ARM's TrustZone?===

			===Can the Trusted Execution Environment (TrEE) be used as a kill switch for the device even if it runs in open mode?===

imported_>ossi1967: /* What is open mode good for at all? */

2009-10-12T11:23:50Z

What is open mode good for at all?

← Older revision		Revision as of 11:23, 12 October 2009
Line 49:		Line 49:
	===What is open mode good for at all?===		===What is open mode good for at all?===

	Provided you don't consume digitally restricted media and don't purchase applications that in any way rely on DRM: You don't need DRM-mode then, but on the other hand why would you want DRM-free mode? What is it you cannot do in DRM-mode in such a scenario?		Provided you don't consume digitally restricted media and don't purchase applications that in any way rely on DRM: You don't need DRM-mode then, but on the other hand why would you want DRM-free mode? What is it you cannot do in DRM-mode in such a scenario? Use case?

imported_>ossi1967: Add Q14 about use cases of DRM-free mode

2009-10-12T11:23:25Z

Add Q14 about use cases of DRM-free mode

← Older revision		Revision as of 11:23, 12 October 2009
Line 46:		Line 46:

	E.g.: I start in DRM-mode, install DRM-free applications from Extras, take 3 pictures, add some contacts. Then I switch to DRM-free mode: Will I be able to run the applications installed in DRM-free mode, view and edit my contacts and view and edit my own pictures? (And the other way round, of course, starting from DRM-free mode and switching to DRM afterwards.)		E.g.: I start in DRM-mode, install DRM-free applications from Extras, take 3 pictures, add some contacts. Then I switch to DRM-free mode: Will I be able to run the applications installed in DRM-free mode, view and edit my contacts and view and edit my own pictures? (And the other way round, of course, starting from DRM-free mode and switching to DRM afterwards.)

			===What is open mode good for at all?===

			Provided you don't consume digitally restricted media and don't purchase applications that in any way rely on DRM: You don't need DRM-mode then, but on the other hand why would you want DRM-free mode? What is it you cannot do in DRM-mode in such a scenario?

imported_>ossi1967: Add Q13 about data accessible across both modes

2009-10-12T11:07:06Z

Add Q13 about data accessible across both modes

← Older revision		Revision as of 11:07, 12 October 2009
Line 12:		Line 12:

	===How easy is it to switch between Open and Closed modes?===		===How easy is it to switch between Open and Closed modes?===

			Is it so trivial that you would want to and be able to do it several times a day and on the go?

	===Can network operators restrict you switching to Open mode?===		===Can network operators restrict you switching to Open mode?===
Line 37:		Line 39:
	* encrypted/signed communications (phone, sms/mms, mails, IM) ?		* encrypted/signed communications (phone, sms/mms, mails, IM) ?

	== How does closed mode affect on-device debugging? ==		=== How does closed mode affect on-device debugging? ===

	For example, will ptrace(2) still work (eg gdb, strace & ltrace)? Will we be able to produce code dumps?		For example, will ptrace(2) still work (eg gdb, strace & ltrace)? Will we be able to produce code dumps?

			===Will DRM-free data and DRM-free applications be accessible from both modes once they're installed/created in either of the two modes?===

			E.g.: I start in DRM-mode, install DRM-free applications from Extras, take 3 pictures, add some contacts. Then I switch to DRM-free mode: Will I be able to run the applications installed in DRM-free mode, view and edit my contacts and view and edit my own pictures? (And the other way round, of course, starting from DRM-free mode and switching to DRM afterwards.)

imported_>lma: /* How does closed mode affect on-device debugging? */ new section

2009-10-12T09:21:09Z

How does closed mode affect on-device debugging?: new section

← Older revision		Revision as of 09:21, 12 October 2009
Line 36:		Line 36:
	* PIM data encryption ?		* PIM data encryption ?
	* encrypted/signed communications (phone, sms/mms, mails, IM) ?		* encrypted/signed communications (phone, sms/mms, mails, IM) ?

			== How does closed mode affect on-device debugging? ==

			For example, will ptrace(2) still work (eg gdb, strace & ltrace)? Will we be able to produce code dumps?

imported_>corsac: add question about end user availability

2009-10-11T21:41:28Z

add question about end user availability

← Older revision		Revision as of 21:41, 11 October 2009
Line 30:		Line 30:
	Please have a license discussion somewhere and let us know when you have consensus.		Please have a license discussion somewhere and let us know when you have consensus.
	What is Nokias position? Peter made a statement at the talk - can someone transcribe it and/or get Nokia to clarify.		What is Nokias position? Peter made a statement at the talk - can someone transcribe it and/or get Nokia to clarify.

			===What exactly is available to the end user?===

			* storage encryption ?
			* PIM data encryption ?
			* encrypted/signed communications (phone, sms/mms, mails, IM) ?